Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/18 8:37 a.m.7 views

BIT-AIRFLOW-2025-54550 Apache Airflow: RCE by race condition in example_xcom dag

The example examplexcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitrary execution of code on the worker. Since the UI users are already highly...

8.1CVSS5.8AI score0.00579EPSS
SaveExploits0References4
Rows per page
Query Builder